AMENDMENTS TO THE CLAIMS 

1 . (Currently amended) A security conununication packet processing apparatus that 
performs at least one of encryption processing, decryption processing and authentication 
processing to a -an inputted p acke t, said security commimication packet processing 
a pparatus comprising: 

one or mor e at least one encryption processing unit operable to perform the 
encryption processing and the decryption processing in a data block unit of Bl bits; 

on e or mor e at least one authentication processing unit operable to perform the 
authentication processing in a data block unit of B2 (-nx Bl) bits in parallel to the 
encryption processing or the decryption processing performed by the -said at least one 
encryption processing unit, and output an authentication value indicating the result of the 
authentication processin g, the data block unit of B2 bits being n times the data block unit 
of Bl bits : 

on e or more at least one data block accumulation unit operable to accumulate the 
data blocks to which the encryption processing is -has been p erformed by the -said at least 
one encryption processing unit, and, when the amount of accumulated amount of the data 
blocks reaches B2 bits, output the data blocks to tbe -said at least one authentication 
processing unit; 

a packet construction unit operable to receive the encrypted or decrypted data 
blocks from # ^said one or more encryption processing ua tunits. receive the 
authentication value from fee -said one or more authentication processing uei tunits. and 
construct a packet including the received data blocks and the authentication value; and 

a control unit operable to divide the inputted packet into the data blocks of Bl 
bits, and output the data blocks sequentially to #te -said at least one encryption processing 
unit. 

2. (Currently Amended) The security communication packet processing apparatus 
according to Claim 1, wherein: 

wh e rein th e said c ontrol unit j^idges- is operable to judge whether which typ e the 
inputted packet isHfee- xfirst type packet requiring the encryption processing and the 
authentication processing, the-a.second type packet requiring the decryption processing 
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and the authentication processing, Ae-a.third type packet requiring one of the encryption 
processing and the decryption processing, or the-a.fourth type packet requiring the 
authentication processing only;^ 

when said control unit judges that t he inputted p acket is judged to b e the first type 
packet, divid e s said control unit is operable to divide the packet into the data blocks of 
Bl bits and outputs o utput t he data blocks sequentially to the -said at least one encryption 
processing unit^j 

when said control unit judges that t he inputted p acket is judged to b e t he second 
type packet, divides said control unit is operable to divide t he packet into the data blocks 
of Bl bits, output s th e m output the data blocks of Bl bits sequentially to the-said 
encryption processing unit, divid e s divide the packet or the-a_duplicate of the packet into 
the data blocks of B2 bits, and outputs- output the data blocks of B2 bits sequentially to 
fee -said at least one authentication processing uniti^ 

when said control unit judges that t he inputted p acket is judg e d to b e t he third 
type packet, divid e s said control unit is operable to divide t he packet into the data blocks 
of Bl bits and outputs output the data blocks sequentially to the -said at least one 
encryption processing unit;v and 

when said control unit judges that t he inputted p acket is judged to b e the fourth 
type packet, divides said control unit is operable to divide t he packet into the data blocks 
of B2 bits and outputs output t he data blocks sequentially to fee -said at least one 
authentication processing unit. 

3 . (Currently Amended) The security communication packet processing unit 
according to Claim L wherein: 

wherein the number of at least one of fete -said at least one encryption processing 
unit and fee -said at least one a ufeentication processing unit is two or more^j and 

fee number of fee -said at least one d ata block accumulation unit is equal to feat 
the niunber of fee -said at least one encryption processing unit. 

4. (Currently Amended) The security communication packet processing apparatus 
according to Claim 3, wherein the -said control unit specifie s is operable to specify, among 
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two or more encryption processing units or two or more authentication processing units, 
tbe -said encryption processing unit or the -said authentication processing unit that is ready 
for processing, and outputs output t he data blocks to the specified encryption processing 
unit or the-authentication processing unit. 

5. (Currently Amended) The security communication packet processing apparatus 
according to Claim U further comprisingf a data path connection switching unit that 
ea noperable to connect the output of tbe -said control unit and the input of tfie -said at least 
one e ncryption processing unit, the output of fee -said control unit and the input of the 
said at least one authentication processing unit, the output of fee- said at least one 
encryption processing unit and the input of fee -said at least one data block accumulation 
unit, and fee output of the -said at least one data block accumulation unit and fee input of 
fee -said at least one aufeentication processing unit, respectively and independently. 

6. (Currently Amended) The security communication packet processing apparatus 
according to Claim 5. wherein: 

wher e in the said control unit fad^es -is operable to judge whether which t\^p e the 
inputted packet is^-fee a^first type packet requiring the encryption processing and fee 
authentication processing, fee-a_second type packet requiring fee decryption processing 
and fee aufeentication processing, fee-a_third type packet requiring one of the encryption 
processing and fee decryption processing, or fee-a^fourfe type packet requiring fee 
aufeentication processing only;; 

when said control unit judges that the inputted p acket is judg e d to be the first type 
packet, controls said control unit is operable to control said fe e-data path connection 
switching unit so as to connect fee output of the -said control unit and fee input of the -said 
at least one encryption processing unit, fee output of tbe -said at least one encryption 
processing unit and fee input of the -said at least one d ata block accumulation unit, and fee 
output of fee -said at least one d ata block accumulation unit and fee input of fee-said 
aufeentication processinR unit;? 

when said control unit judges feat t he inputted p acket is judg e d to b e the second 
type packet, controls said control unit is operable to control said t he-data path cormection 
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switching unit so as to connect the output of #te -said control unit and the input of tihe-said 
at least one encryption processing unit, and the output of fee -said control unit and the 
input of the -said at least one authentication processing u nit;? 

when said control unit judges that the inputted p acket is judg e d to be t he third 
type packet, controls said control unit is operable to control said fe e-data path connection 
switching unit so as to connect the output of fee -said c ontrol unit and fee input of fee -said 
at least one encryption processing unit;? and 

when said control unit judges that fe e inputted p acket is judg e d to b e fe e fourth 
type packet, control s said control unit is operable to control said fe e-data pafe connection 
switching unit so as to connect the output of fee -said control unit and the input of fee- said 
at least one authentication processing unit. 

7. (Currently Amended) The security communication packet processing apparatus 
according to Claim 6, wherein: 

wher e in fe e number of at least one of fee -said at least one encryption processing 
unit and fee -said at least one aufeentication processing unit is two or more;- and 

the number of fee -said at least one data block accumulation unit is equal to fetat 
the number of fee >said at least one encryption processing unit. 

8. (Currently Amended) The security communication packet processing apparatus 
according to Claim 7, wherein fee -said control unit sp e cifie s is operable to specify, among 
two or more encryption processing units or two or more aufeentication processing units, 
fee- said encryption processing unit or fee -said authentication processing unit that is ready 
for processing, and makes -make said fe e-data path connection switching unit perform a 
connection for fee specified encryption processing unit or fee-aufeentication processing 
unit. 

9. (Currently amended) The security communication packet processing apparatus 
according to Claim 1, further comprisingT a processing data saving unit^ provided for 
each of at least one of fee -said at least one encryption processing unit, fee- said at least 
one aufeentication processing unit and fee -said at least one data block accumulation unit, 



processing data saving unit having a memory area for temporarily 
suspending the processing of the data blocks in the processing unit for v^hich said 
processing data saving unit is provided, and saving the data blocks which ^e -were b eing 
processed in the processing unit corresponding respectively to the processing unit. 

10. (Currently amended) The security communication packet processing apparatus 
according to Claim 9, wherein tbe -said control unit sp e cifi e s is operable to specify t he 
processing unit that is performing the processing of the data blocks of the packet with the 
lowest priority among the processing units, and^ after suspending the processing of the 
data blocks in the processing unit and saving the data blocks which m ^were b eing 
processed in the processing unit into the -said p rocessing data saving uni t provided to the 
processing unit performing the processing of the data blocks of the packet with the lowest 
priority, make^ -make t he processing unit perform the processing of the data blocks of the 
inputted packet. 

1 1 . (Currently Amended) The security communication packet processing apparatus 
according to Claim 10^ further comprisingf4he^ data path connection switching unit that 
em -operable to c onnect the output of the -said c ontrol xmit and the input of tifee- said at least 
one encryption processing unit, the output of the -said control unit and the input of the 
said at least one authentication processing unit, the output of ^ ^said at least one 
encryption processing unit and the input of Ae -said at least one data block accumulation 
unit, and the output of the- said at least one data block accumulation unit and the input of 
tbe -said at least one authentication processing unit, respectively and independently. 

12. (Currently Amended) The security communication packet processing apparatus 
according to Claim 11, wherem: 

wh e r e in t he number of at least one of fee -said at least one encryption processing 
unit and fee -said at least one authentication processing unit is two or more^j and 

the number of fee -said at least one data block accumulation unit is equal to feat 
the number of the -said at least one encryption processing unit. 
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13. (Currently amended) The security communication packet processing apparatus 
according to Claim U further comprisingT-tiie^ processing data saving unitj provided for 
each of at least two of the -said at least one encryption processing unit, ^ ^said at least 
one authentication processing unit and the- said at least one data block accumulation unit, 
that has each processing data saving unit having a memory area shared by the processing 
units for temporarily suspending the processing of the data blocks in the processing unit 
and saving the data blocks which afe -were b eing processed in the processing units. 

14. (Currently amended) The security communication packet processing apparatus 

according to Claim 13, wherein the -said control unit specifi e s is operable to specify, 
among the processing units, the processing unit that is performing the processing of the 
data blocks of the packet with the lowest priority, and^ after suspending the processing of 
the data blocks in the processing unit and saving the data blocks which afe -were b eing 
processed in the processing unit in fee -said p rocessing data saving uni t provided to the 
processing unit performing the processing of the data blocks of the packet with the lowest 
priority, iftd^es -make t he processing unit perform the processing of the data blocks of the 
inputted packet. 

15. (Currently Amended) The security communication packet processing apparatus 
according to Claim 14, further comprisingf-fee^ data path connection switching imit that 
eaft -operable to connect the output of fee -said control unit and the input of fe ^said at least 
one e ncryption processing unit, fee output of fee -said control unit and fee input of fee 
said at least one authentication processing unit, fee output of fee -said at least one 
encryption processing unit and the input of the -said at least one data block accumulation 
unit, and the output of fete -said at least one data block accumulation unit and the input of 
fee -said at least one a ufeentication processing unit, respectively and independently. 

16. (Currently Amended) The security conununication packet processing apparatus 
according to Claim 15, wherein: 

wh e rein the number of at least one of fee- said at least one encryption processing 
unit and feie -said at least one a uthentication processing unit is two or moreij and 



the number of fee -said at least one data block accumulation unit is equal to feat 
the number of fee -said at least one encryption processing unit. 

17. (Previously Presented) The security communication packet processing apparatus 
according to Claim 1, wherein the Bl is 64, and the B2 is 512. 

1 8. (Currently Amended) A security communication packet processing method feat 
performs at least one of fee-encryption processing, decryption processing and fee 
aufeentication processing to fee -an inputted p acket , said security commimication packet 
processing method comprising including : 

a dividing step for dividing the inputted packet into feenlata blocks of Bl bits; 

an encryption processing st e p for p erforming the encryption processing or the 
decryption processing to fee divided data blocks of Bl bits; 

a data block accumulating st e p for a ccumulating fee encrypted data blocks and 
outputting fee data blocks v^hen fee amount of accumulated amount of fe e data blocks 
reaches B2 (= n x Bl) b its , B2 bits being n times the number of Bl bits : 

an auth e ntication processing st e p for p erforming fee authentication processing to 
the outputted data blocks of B2 bits in parallel to the encryption processing or the 
decryption processing, and outputting fee aufeentication value indicating fee result of the 
aufeentication processing; 

a packet constructing st e p for receiving fee encrypted or decrypted data blocks, 
receiving fee outputted authentication value, and constructing fee packet including fee 
received data blocks and fee aufeentication value. 

19. (Currently Amended) The security communication packet processing method 
according to Claim 1 8^ further includin g comprising : 

a control step forj udging vyhefeer w hich type t he inputted packet isrfee_a first 
type packet requiring fee encryption processing and fee aufeentication processing, fee-a 
second type packet requiring the decryption processing and the aufeentication processing, 
tbe-a^third type packet requiring only one of fee encryption processing and the decryption 
processing, or fee-fLfourth type packet requiring the authentication processing only, and 
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when it -the inputted packet is judged to be the first type packet, controlling so that the 
division in the dividing st e p said dividing of the inputted packet the encryption 
processing in-the -performed in said performing of the encryption processing-step.orthe 
decryption processing , the accumulation in th e data block said accumulating st ^of the 
encrypted data blocks , the authentication processing performed in the- said performing of 
the authentication processing step-and the construction performed in tbe -said constructing 
of the p acket constructing st e p are performed. 

20. (New) The security communication packet processing apparatus according to 
claim 5, wherein said data path connection switching unit is operable to switch a data 
path between two of said control unit, said at least one encryption processing unit, said at 
least one authentication processing imit and said at least one data block accumulation 
unit, so that only packets A pass through said at least one data block accumulation unit 
and only packets B bypass said at least one data block accumulation imit, the packets A 
being a packet which requires both encryption processing and authentication processing 
and a packet which requires both decryption processing and authentication processing, 
and the packets B being a packet which requires only encryption processing, a packet 
which requires only decryption processing and a packet which requires only 
authentication processing. 

2 1 . (New) The security communication packet processing apparatus according to 
claim 9, wherein the data blocks are saved from said at least one encryption processing 
unit and said at least one authentication processing unit into said processing data saving 
unit, and the saved data blocks are restored from said processing data saving unit to the 
said at least one encryption processing unit and said at least one authentication processing 
unit, via said at least one data block accumulation unit. 

22. (New) The security communication packet processing apparatus according to 
claim 14, wherein said control unit is further operable to make another processing unit 
read the data blocks from said processing data saving unit and restart the processing, the 
another processing unit having a function equivalent to a function of the processing unit 
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performing the processing of the data blocks of the packet with the lowest priority, from 
which processing unit the data blocks are saved into said processing data saving unit. 
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